This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PfCUpABLpqCJ97Dy9wi3_CeRwT8.roa File: PfCUpABLpqCJ97Dy9wi3_CeRwT8.roa (raw, json) Hash identifier: CtMmGid6K8o6A2ErifJ7818ioeFuPHYKHAqLyVxzFGo= Subject key identifier: 3D:F0:94:A4:00:4B:A6:A0:89:F7:B0:F2:F7:08:B7:FC:27:91:C1:3F Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7737D1548A7A1C75FDE286B56417D Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PfCUpABLpqCJ97Dy9wi3_CeRwT8.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39112 IP address blocks: 82.177.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:73:7d:15:48:a7:a1:c7:5f:de:28:6b:56:41:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3df094a4004ba6a089f7b0f2f708b7fc2791c13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:69:31:f3:d0:ae:7d:3c:68:28:d5:27:f6: 30:5a:86:2b:e5:ad:4f:0e:7a:8f:ed:c6:69:fc:58: ba:62:c7:3a:d5:c3:6f:53:e7:e1:7c:f7:65:8e:d6: 21:a2:53:8e:69:f4:f5:3f:86:85:2c:02:b4:b8:14: 63:6e:a1:71:dd:68:08:b4:a4:a0:4e:e8:60:2e:3b: 69:aa:71:39:5f:b3:13:20:ea:a1:12:6f:6a:3f:2a: c5:68:1b:3c:62:e8:3c:98:ae:c8:47:36:88:0f:0a: 65:57:c5:72:87:bd:05:c0:3a:6d:25:cb:13:15:3f: 32:41:6f:52:74:5f:6b:06:ed:59:7b:f1:a8:ad:6f: b7:f7:30:b1:26:10:e0:34:63:10:02:fa:64:91:18: 0f:42:b5:5d:16:47:09:9b:f2:4b:d0:2a:06:02:6f: 90:a1:48:22:00:89:28:bb:af:d3:80:53:3f:e9:2e: 9d:ad:8e:57:f1:64:f2:76:6f:41:dc:47:12:f9:1a: f1:b7:e1:da:8a:82:83:a6:28:32:30:42:9d:79:4f: e2:a9:b6:57:03:52:fd:2f:4e:cd:29:64:60:b5:09: 27:12:40:d6:9d:88:d3:e5:b3:cb:cf:d3:8d:e0:08: 0d:f9:8a:db:8a:51:d4:96:a1:fb:00:40:8c:6f:f6: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F0:94:A4:00:4B:A6:A0:89:F7:B0:F2:F7:08:B7:FC:27:91:C1:3F X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PfCUpABLpqCJ97Dy9wi3_CeRwT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.253.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:f8:ff:cc:00:5b:af:60:92:fd:2e:a4:56:e4:01:02:d3:fc: 87:5b:48:fa:98:a2:68:28:18:1a:3c:ce:79:d5:e4:66:06:09: 50:14:ff:77:4e:50:8f:ba:e3:15:35:af:a4:28:2b:07:33:19: 25:fa:b6:97:05:51:52:60:8b:75:ab:3e:b7:5c:b3:db:26:12: 12:2d:18:ad:51:40:be:c1:1e:9e:b1:86:08:69:b6:ef:c5:a4: a1:7f:66:80:35:03:c0:78:3e:45:ae:f0:c7:6b:db:10:ea:2d: 0e:29:24:fa:61:9a:c3:0a:cc:a1:5b:85:83:20:7f:7e:d7:07: a5:1c:d2:bf:61:e6:ee:87:61:f1:15:2d:17:81:15:47:cd:d5: ff:87:63:f3:94:1b:40:16:25:69:75:e3:67:b7:dc:a0:28:f1: 25:35:2f:59:16:5e:4f:90:3e:39:d6:a3:d2:d1:32:63:d5:64: 66:5f:3b:eb:35:cd:18:98:c3:c2:c6:93:af:11:42:61:93:ca: 34:2b:be:64:d5:3a:6a:da:52:4f:d3:6b:a1:5b:e2:bb:95:1c: 92:ae:8b:67:1f:d7:dc:5f:3a:91:50:1f:75:6f:f8:3c:c6:1a: 78:d9:ea:6b:a2:dc:a6:5a:fe:55:78:c9:52:10:63:58:cd:39: 4d:27:90:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3N9FUinocdf3ihrVkF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGYwOTRhNDAwNGJhNmEwODlmN2IwZjJmNzA4YjdmYzI3OTFjMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM5pMfPQrn08aCjVJ/YwWoYr5a1P DnqP7cZp/Fi6Ysc61cNvU+fhfPdljtYholOOafT1P4aFLAK0uBRjbqFx3WgItKSg TuhgLjtpqnE5X7MTIOqhEm9qPyrFaBs8Yug8mK7IRzaIDwplV8Vyh70FwDptJcsT FT8yQW9SdF9rBu1Ze/GorW+39zCxJhDgNGMQAvpkkRgPQrVdFkcJm/JL0CoGAm+Q oUgiAIkou6/TgFM/6S6drY5X8WTydm9B3EcS+Rrxt+HaioKDpigyMEKdeU/iqbZX A1L9L07NKWRgtQknEkDWnYjT5bPLz9ON4AgN+YrbilHUlqH7AECMb/Y3QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3wlKQAS6agifew8vcIt/wnkcE/MB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvUGZDVXBBQkxwcUNKOTdEeTl3aTNfQ2VSd1Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUrH9MA0G CSqGSIb3DQEBCwUAA4IBAQBd+P/MAFuvYJL9LqRW5AEC0/yHW0j6mKJoKBgaPM55 1eRmBglQFP93TlCPuuMVNa+kKCsHMxkl+raXBVFSYIt1qz63XLPbJhISLRitUUC+ wR6esYYIabbvxaShf2aANQPAeD5FrvDHa9sQ6i0OKST6YZrDCsyhW4WDIH9+1wel HNK/Yebuh2HxFS0XgRVHzdX/h2PzlBtAFiVpdeNnt9ygKPElNS9ZFl5PkD451qPS 0TJj1WRmXzvrNc0YmMPCxpOvEUJhk8o0K75k1Tpq2lJP02uhW+K7lRySrotnH9fc XzqRUB91b/g8xhp42eprotymWv5VeMlSEGNYzTlNJ5CE -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:45 2026 by rpki-client